https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T20:06:06.419295+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-337714 EUVD-2026-337714 2026-10-06T20:06:06.465546+00:00 EUVD-2026-337714 https://cve.radiocsirt.org/vuln/fkie_cve-2023-53939 fkie_cve-2023-53939 2026-10-06T20:06:06.465583+00:00

TinyWebGallery v2.5 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts through the folder name parameter. Attackers can edit album folder names with script tags to execute arbitrary JavaScript when other users view the affected gallery pages.

 https://cve.radiocsirt.org/vuln/ghsa-gxx9-w3xc-8xvf GHSA-gxx9-w3xc-8xvf 2026-10-06T20:06:06.465616+00:00

TinyWebGallery v2.5 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts through the folder name parameter. Attackers can edit album folder names with script tags to execute arbitrary JavaScript when other users view the affected gallery pages.